DevSecOps Engineer
Core
Strengthen the security of a cloud-native environment by identifying/remediating vulnerabilities, securing GCP/Kubernetes, and building automation for DevSecOps and AI security.
Role type
hands-on DevSecOps Engineer
Builds
secure cloud-native infrastructure, CI/CD pipelines, and AI application environments
Domain
Fintech/Insurance, Cloud Security, DevSecOps
Deliverable
production ML models
Required skills
GCP security, Kubernetes, CVE management, container security, CI/CD security, SAST/SCA tools, CSPM platforms, Bash/Python scripting
Preferred skills
GKE at scale, Terraform/Helm/ArgoCD, SBOM/dependency management, Kubernetes policy tools, SIEM/incident response
Technologies
GCP, Kubernetes, GKE, Terraform, Helm, ArgoCD, Semgrep, Snyk, SonarQube, Wiz, Prisma Cloud, CrowdStrike Falcon Cloud Security
Responsibilities
Identify and remediate security vulnerabilities across containers, dependencies, and GCP infrastructure; Secure GCP and Kubernetes environments (IAM, networking, logging, RBAC, secrets); Manage container security practices (image scanning, base images, runtime security); Operate SAST, SCA, and CSPM tools; Partner with AI teams to secure AI applications, models, and agents; Implement automated security gates in CI/CD pipelines; Automate security tasks with Bash/Python; Support security monitoring and incident response
Seniority
Mid-Senior, hands-on IC